?
Solved

lights on the swtich go erratic twice a day,  restart the server and it fine for a while

Posted on 2006-10-30
11
Medium Priority
?
214 Views
Last Modified: 2010-03-19
I have a 20 system network on a 24 port switch occasionally the lights gor crazy flashing eratic.  I unpluged each port and when I got to the server cable and pulled it out, it stopped.  When I restart the server everything goes fine untill it does it again.  It does it 2 to 3 times in a 8 hour day.  

What could cause this?  Others have said the nic is flooding the network, but no one offerd me any solutions.  Please Help
0
Comment
Question by:bsjld
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 2
  • +3
11 Comments
 
LVL 10

Expert Comment

by:fm250
ID: 17837437
Are sure that it is the server. if you unplug the server it will work fine. because it could be the switch itself.
if it is the nic you may try to change it.

Also check if any unusual trafic to-from the server.

0
 
LVL 14

Expert Comment

by:Geisrud
ID: 17837471
I would use a packet sniffer and see what data is going across the wire at that time.

I can't recommend which sniffer is best, but one I know of is here: www.ethereal.com
0
 
LVL 9

Expert Comment

by:NYtechGuy
ID: 17837588

The other people were right- you NEED to stop using that network card on the server.  Install a new network card
0
Get MongoDB database support online, now!

At Percona’s web store you can order your MongoDB database support needs in minutes. No hassles, no fuss, just pick and click. Pay online with a credit card. Handle your MongoDB database support now!

 

Author Comment

by:bsjld
ID: 17837825
actually this is the 2nd card.  
 ethereal seems kinda hard to learn, what do i look for
0
 
LVL 13

Expert Comment

by:ScooterAnderson
ID: 17837881
Have you tried plugging the Server network cable into another port on the switch, to rule out the Switchport?  Is the switch managed/can you get error counts/reports on each of the switch ports??
0
 
LVL 23

Expert Comment

by:Erik Bjers
ID: 17838144
SCAN YOUR SERVER FOR MALWARE.  If this is doing this with the second NIC you may have malware on your server that is sending out broadcast traffic.  Also Scooter has a point with the possible bad switchport.  Could also be faulty CAT5

eb
0
 

Author Comment

by:bsjld
ID: 17838411
the port is not managed, i will move to a different port.  I used spybot (free) is this adequate for malware?  It found some but it still doing it.
0
 
LVL 10

Expert Comment

by:fm250
ID: 17838497
You need to check the system throughly, spybot won't be enough for servers. So things to check like:
- service that running -take a close look to the one that you suspect
- log files
- accounts and groups -look to the administrators one especially
- installed software
- open ports

ans so on
But I advise youto search the problem and to make a descision weather it is a software or hardware problem


hope this help!
0
 
LVL 23

Expert Comment

by:Erik Bjers
ID: 17838561
you should also run your scans in safemode this will prevent any viruses from interfearing with the scan.

eb
0
 

Author Comment

by:bsjld
ID: 17841384
ok, i will do that tonight, do you have any suggestions on software that will scan this thourouh.  I hav ca eturust anti virus, the enterprise version. I don't think this scan for all that though
0
 
LVL 10

Accepted Solution

by:
fm250 earned 1000 total points
ID: 17843167
bsjld,
there is no singale software that can do that for you. you CA etrust -which sometimes can't delete even a know viruses- will do the virus part for you. spybot or any other spyware removal may take care of the spyware. you may use windows defender to check running services and process. Even log is something that you need to check yourself. Also accounts and groups is something that you need to check and examine yourself.

if you see any suspecious services or programs then make sure to tigh the security. you may need to change admin pass and limit other accounts that have previlages to change the system.

hope this helps!
0

Featured Post

ATEN's HDBaseT Presentation at InfoComm 2017

Hear ATEN Product Manager YT Liang review HDBaseT technology, highlighting ATEN’s latest solutions as they relate to real-world applications during her presentation at the HDBaseT booth at InfoComm 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
For many of us, the  holiday season kindles the natural urge to give back to our friends, family members and communities. While it's easy for friends to notice the impact of such deeds, understanding the contributions of businesses and enterprises i…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question